Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: qbFzS3SJdp0lzaEbIBRpdqu5Ef0YXVcQx6NxN8yVN7I=
Subject key identifier: 01:64:07:33:03:A8:83:50:82:58:07:CE:70:E9:A7:DF:03:A9:C0:1C
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 019D98BDC218CCE698E128E627A023CB6690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 160D
Signing time: Fri 17 Apr 2026 00:01:05 +0000
Manifest this update: Fri 17 Apr 2026 00:01:05 +0000
Manifest next update: Sat 18 Apr 2026 00:01:05 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: 50VgAI744B5ujeooxPy2VqMSjuyE1mm7hV+LFYRSR8g=)
2: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (hash: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68=)
3: jaTCzxQZwGVoMfE5pxy0Gbm9K_E.roa (hash: ULw0U4ZGmZtESpblMgYhOZZu7hCKbL/R7CwXeeGSDEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c2:18:cc:e6:98:e1:28:e6:27:a0:23:cb:66:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Apr 17 00:01:05 2026 GMT
Not After : Apr 18 00:01:05 2026 GMT
Subject: CN=0164073303a88350825807ce70e9a7df03a9c01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:5a:75:dc:b2:7a:c3:d1:0b:44:9c:e7:52:
de:b3:68:5f:3b:4d:3f:3b:39:d9:c7:e3:06:d6:34:
90:d6:97:6f:47:05:76:1a:16:a8:be:10:96:1e:53:
ff:14:f5:94:02:95:fa:ff:95:a9:2d:90:b8:ed:59:
d6:0a:b0:a2:5a:30:87:c5:af:76:f7:93:77:9d:ef:
c9:e1:7e:e7:47:9e:27:77:72:81:e2:14:81:c5:3d:
79:d2:6e:27:40:33:5c:b3:42:90:b5:93:ce:c9:02:
49:49:3b:84:68:4a:7a:58:17:c8:f4:6a:6f:2b:9c:
47:53:11:4b:38:bd:17:81:c1:b0:6a:83:71:d4:88:
8b:15:eb:02:1c:55:4f:e3:79:fc:10:8f:2a:20:85:
22:cb:bf:4d:1a:57:04:c0:93:7f:71:e7:df:3e:d6:
d4:f5:1a:77:c3:28:1f:a8:24:55:ae:06:2d:78:65:
9d:62:fb:1d:a4:01:b2:aa:b0:4f:65:ad:02:e5:d1:
32:ec:bb:af:6f:d8:5b:c1:72:82:35:3e:f9:3d:b0:
cf:de:06:94:2b:29:22:04:4d:61:bb:dc:4f:82:6b:
1a:3e:7c:e5:2c:34:05:8e:92:13:bc:7e:79:2f:7f:
2c:23:ca:74:36:9a:3c:a2:21:09:8b:02:3e:aa:71:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:64:07:33:03:A8:83:50:82:58:07:CE:70:E9:A7:DF:03:A9:C0:1C
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:47:d5:ed:7a:03:cb:c4:82:41:81:c1:b0:b9:61:d9:1d:bb:
3d:2f:e3:9e:aa:b6:14:f7:49:81:9a:be:c7:e3:e8:a4:04:16:
96:10:15:d2:90:ca:7e:21:c5:55:5d:8f:bc:cb:24:2d:fc:02:
a4:73:71:30:b4:11:00:e9:8a:6b:35:ba:5d:7c:fd:7c:52:c8:
db:9d:1e:74:d1:64:19:51:ed:1a:4e:2d:57:5a:25:43:9a:6e:
9f:30:6b:90:90:ad:9e:fb:41:56:8e:a6:44:76:ee:03:4b:bc:
1c:d2:1d:53:64:b7:a2:e5:0e:ab:c9:72:e3:74:35:3f:2f:91:
e0:ce:aa:1e:cd:8d:9a:c0:e6:71:bf:70:bf:bb:20:dd:3c:ea:
fb:82:83:c1:57:a3:72:86:be:1c:40:f7:e6:b9:d7:c6:17:11:
c4:d3:65:8f:18:18:84:b8:06:1a:df:c0:d6:f4:0d:84:f1:7a:
36:29:55:27:0e:cd:50:63:da:da:14:c7:c9:05:f8:16:4e:8d:
dc:ae:a0:49:37:3a:03:81:b2:52:c8:53:a3:6f:f8:c1:69:8c:
b3:ce:eb:4e:74:bc:98:0e:20:ca:c5:41:82:cd:41:14:4b:11:
c9:92:94:e4:eb:82:fd:b0:93:eb:97:9f:ec:60:70:f1:2c:58:
e3:83:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:34 2026 by rpki-client